PT-2026-91494

CVE-2026-43737

·

Published

2026-09-14

·

Updated

2026-09-14

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7 iPadOS versions prior to 26.7 macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 tvOS versions prior to 27 watchOS versions prior to 27
Description An authorization issue exists where an app may be able to access motion data from headphones without obtaining user consent. This is caused by insufficient validation during the authorization process.
Recommendations Update iOS to version 26.7 or later. Update iPadOS to version 26.7 or later. Update macOS Golden Gate to version 27 or later. Update macOS Sequoia to version 15.8 or later. Update macOS Tahoe to version 26.7 or later. Update tvOS to version 27 or later. Update watchOS to version 27 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾